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IN THE CLAIMS: 

1 . (Currently Amended) A method in a data processing system for tracking 
relationships between programs and data, the method comprising: 

receiving a file access request from a particular program, wherein the file access 
request is for a particular file and is received at an operating system level and wherein the 
particular file is defined by a specified file name; 

creating an association between the specified file name and the particular program 
requesting the file access^ in response to receiving the file access request; bbA 

responsive to creating the association, storing the association between the 
specified file name and the particular program, wherein the association is used for 
subsequent accesses to the file and is stpycd h\ relation to other stored associations, said 
other associations respectively corresponding to each of the other ouoh that a otorod 
association ig srtorod for oaoh file names_ for whi ch file access is requested by the 
particul^ progra m; and 

saving all of the stored associations for at least the life of the particular projgram , 

2. (Currently Amended) The method of claim 1, wherein tho ofloooiarion is stor e d us 
m e ta data, s aid method includes accessing a database containing each of said stored 
associations to find the file names and locations of all of the data and configuration files 
associated with the particular program, 

3. (Previously Presented) The method of claim 1 , wherein the association includes a 
program name for the prograun. 

4. (Original) The method of claim 3, wherein the association fijrther includes at 
least one of a location of the file, a time of file access, a date of file access, an extension 
for the file, and an identification of a user of the program. 

5. (Original) ITie method of claim 4, wherein the location of the file is in a remote 
data processing system. 
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6. (Original) The method of claim 1, wherein the file request is one of a request to 
open the file, close the file, copy the file, or delete the file. 

7. (Original) The method of claim 1, wherein the program is a first program and 
wherein a request to open the file originates from the first program and a request to close 
the file originates fix>m a second program. 

8. (Original) The method of claim 7» wherein the association includes the second 
program. 

9. (Currently Amended) The method of claim 1, wherein the receiving step, the 
id e ntifying creating step, and the storing step are performed wthin an operating system 
kernel. 

1 0. (Currently Amended) The method of claim 1 , wherein the receiving step, the 
id e ntifying creating step, and the storing step are performed wthin a device driver. 

1 1 . (Original) The method of claim 1 0, wherein the drive driver intercepts calls 
directed to a mechanism used as a point of entry for the access, 

1 2. (Original) The method of claim 1 , wherein the storing step comprises: 
storing the association between the file and the program in a database. 

1 3. (Original) The method of claim 1 , wherein associations are stored in a database 
and further comprising: 

receiving a request from a requestor to access the associations; 

querying the database for the associations; 

receiving a result firom the database; and 

returning the result retumed fi-om the database to the requestor. 
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14. (Cancel) 

15. (Cancel) 

16. (Original) The method of claim 1, wherein the storing step comprises: 
storing the association between the file and the program in at least one of a 

registry, file, and a file system. 

17. (Cancel) 

18. (Cancel) 

19. (Cancel) 

20. (Cancel) 

21. (Cancel) 

22. (Currently Amended) A data processing system for tracking relationships 
between programs and data, the data processing system comprising: 

receiving means for receiving a file access request from a particular program, 
wherein the file access request is for a particular file and is received at an operating 
system level and wherein the particular file is defined by a specified file name; 

creating means for creating an associarion between the specified file name and the 
particular program requesting the file accesSj_in response to receiving the file access 
request; aad 

storing means responsive to ^oe^sst creation of the associatio n^ storing m e ono for 
storing the association between the specified file name and the particular program, 
wherein the association is used for subsequent accesses to the file and is stored in relation 
to other stored associations, said other associations respectively corresponding to other 
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suoh that a otorod ofloooiotion io stor e d for e ach file naines_for which file access is 
requested by the particularprogram : and 

means for saving all of the stored associations for at least the life of the particular 
program . 

23. (Original) The data processing system of claim 22, wherein the association is 
stored as raeta data. 

24. (Previously Amended) The data processing system of claim 22, wherein the 
association includes a file name for the file and a program name for the program. 

25. (Original) The data processing system of claim 24, wherein the association 
further includes at least one of a location of the file, a time of file access, a date of file 
access, an extension for the file, and an identification of a user of the program. 

26. (Original) The data processing system of claim 25, wherein the location of the 
file is in a remote data processing system. 

27. (Original )The data processing system of claim 22, wherein the file request is one 
of a request to open the file, close the file, copy the file, or delete the file. 

28. (Original) The data jnrocessing system of claim 22, wherein the program is a first 
program and wherein a request to open the file originates fi'om the first program and a 
request to close the file originates firom a second program. 

29. (Original) The data processing system of claim 22, wherein the association 
includes the second program. 

30. (Currently Amended) The data processing system of claim 22, wherein the 
receiving means, the identifying creatine means, and the storing means are located within 
an operating system kernel. 
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3 1 . (Currently Amended) The data processing system of claim 22, wherein the 
receiving means, the id e ntifying creatine means, and the storing means are located within 
a device driver. 

32. (Original) The data processing system of claim 31, wherein the drive driver 
intercepts calls directed to a mechanism used as a point of entry for the access. 

33. (Original) The data processing system of claim 22, wherein the storing means 
comprises: 

means for storing the association between the file and the program in a database. 

34. (Original) The data processing system of claim 22, wherein associations are 
stored in a database^ wherein the receiving means is a first receiving means, and further 
comprising: 

second receiving means for receiving a request fh>m a requestor to access the 
associations; 

querying means for querying the database for the associations; 
third receiving means for receiving a result from the database; and 
returning means for reluming the result returned from the database to the 
requestor. 

35. (Cancel) 

36. (Cancel) 

37. (Original) The data processing system of claim 22, wherein the storing means 
comprises: 

means for storing the association between the file and the program in at least one 
of a registry, file, and a file system. 
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38. (Currently Amended) A computer program product in a computer readable 
medium fox u^cking relationships between programs and data, the computer program 
product comprising: 

first instructions for receiving a file access request from a particular program, 
wherein the file access request is for a particular file and is received at an operating 
system level and wherein the particular file is defined by a specified file name; 

second instructions for creating an association between the specified file name 
and the particular program requesting the file access^in response to receiving the file 
access request; bb4 

third instructions^fef? responsive to creating the association, for storing the 
association between the specified file name and the particuleir program^ wherein the 
association is used for subsequent accesses to the file and is stored in relation to other 
stored association s ^ said other associations respectively corresponding to other ouoh that a 
otorod aoaociation ia otor e d for oaoh file names.for which file access is requested by the 
particular program : antj 

fourth instructions for saving all of the stored associations for at least the life of 
the particular program. 

39. (Original) The computer program product of claim 38, wherein the association is 
stored as meta data. 

40. (Previously Presented) The computer program product of claim 38, wherein the 
association includes a program name for the program. 

41 . (Original) The computer program product of claim 40, wherein the association 
fiurther includes at least one of a location of the file, a time of file access, a date of file 
access, an extension for the file, and an identification of a user of the program. 

42. (Original) The computer program product of claim 4 1 , wherein the location of 
the file is in a remote data processing system. 
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43. (Original) The computer program product of claim 38, wherein the file request is 
one of a request to open the file, close the file, copy the file, or delete the file. 

44. (Original) The computer program product of claim 38, wherein the program is a 
first program and wherein a request to open the file originates fi:om the first program and 
a request to close the file originates fi-om a second program. 

45. (Original) The computer program product of claim 38, wherein the association 
includes the second program. 

46. (Previously Presented) The computer program product of claim 38, wherein the 
first instmctions, the second instructions, and the third instructions are located within an 
operating system kernel, 

47. (Previously Presented) The computer program product of claim 38, wherein the 
first instmctions, the second instructions, and the third instructions are located within a 
device driver. 

48. (Original) The computer program product of claim 47, wherein the drive driver 
intercepts calls directed to a mechanism used as a point of entry for the access. 

49. (Previously Presented) The computer program product of claim 38, wherein the 
third instmctions comprises: 

sub-instructions for storing the association between the file and the program in a 
database. 

50. (Currently Amended) The computer program product of claim 38, wterein 
associations are stored in a database and fiirther comprising: 

fewtb fifth instructions for receiving a request fix>m a requestor to access the 
associations; 

fifth sixth instructions for querying the database for the associations; 
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sixth seventh instmctions for receiving a result from the database; and 
oovonth eighth instructions for returning the result returned fh>ni the database to 
the requestor. 

51. (Cancel) 

52. (Cancel) 

53. (Previously Presented) The computer program product of claim 38, wherein the 
third instructions comprises: 

sub-instructions for storing the association between the file and the program in at 
least one of a registry, file, and a file system. 
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